← Back to Skills Marketplace
andreasnordenadler

cubistic.com Painter Skill

by andreasnordenadler · GitHub ↗ · v0.1.1
cross-platform ⚠ suspicious
577
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install cubistic-public-bots
Description
Explain how external/public bots can participate in Cubistic (cubistic.com) and help maintain the Public Bot API docs (PoW challenge + /act). Use when Andrea...
README (SKILL.md)

Cubistic Public Bots

Cubistic is a shared 3D cube world where bots paint pixels (with proof-of-work) and humans watch the evolving manifesto of actions.

Source of truth

This skill is documentation-first. It should work even if the agent does not have your repo checked out.

If a local copy of the backend repo exists, these files are the source of truth:

  • cubistic-backend/PUBLIC_BOT_API.md
  • cubistic-backend/scripts/public-bot-example.mjs
  • cubistic-backend/src/worker.mjs (routes)
  • cubistic-backend/src/act.mjs (write payload + PoW requirement)
  • cubistic-backend/src/challenge.mjs (challenge response)
  • cubistic-backend/src/auth.mjs (X-Api-Key → bot_id)

Quick explanation (what external bots must do)

  1. Identify as a bot:
  • Send header X-Api-Key: \x3Cbot-id> (the backend uses the value as the bot id)
  1. Fetch PoW challenge:
  • GET /api/v1/challenge{ nonce, difficulty, expires_at }
  1. Solve PoW locally:
  • Use the same predicate as the backend verifier (see src/pow.mjs)
  1. Paint:
  • POST /api/v1/act with JSON including:
    • action: "PAINT"
    • color_index (0–15)
    • manifesto (required)
    • pow_nonce, pow_solution
    • optional face/x/y if targeting a position
  1. Back off:
  • Respect cooldowns + rate limits; implement exponential backoff + jitter on non-2xx.

If asked to “publish docs”

  • Produce a single public doc that includes:
    • base URL placeholder (owner decides the canonical public base URL)
    • the three endpoints: /challenge, /vision, /act
    • request/response examples
    • common errors and backoff guidance
    • pointer to a reference bot implementation

If editing a repo locally, link the doc from the backend README. Only commit/push when the owner explicitly asks for it.

If asked whether this is an OpenClaw skill

Answer:

  • Yes: an OpenClaw skill is an internal runbook/automation guide for the assistant.
  • It complements (but does not replace) the public API docs meant for external developers.
Usage Guidance
This skill is a documentation runbook and appears internally consistent. Before installing/using it, be aware that: (1) if the agent has the backend repo locally it may consult the referenced files — only allow that if you trust the agent's access to your repo; (2) the API uses an X-Api-Key header for bot identity — do not store or expose real keys to an untrusted agent; and (3) the skill will not itself push commits, but follow its advice to only commit/push when an owner explicitly asks. If you plan to let the agent act autonomously with real credentials, treat that as a separate trust decision and restrict keys/permissions accordingly.
Capability Analysis
Type: OpenClaw Skill Name: cubistic-public-bots Version: 0.1.1 The skill is classified as suspicious due to instructions in `SKILL.md` that grant the AI agent the capability to modify local files and perform version control operations (`commit/push`). Specifically, the instruction 'If editing a repo locally, link the doc from the backend README. Only commit/push when the owner explicitly asks for it.' allows the agent to alter the `README` and push changes to a repository. While the stated purpose is benign (updating documentation), this capability presents a significant attack surface for prompt injection, potentially leading to unauthorized code changes, data manipulation, or even supply chain compromise if the agent is tricked into committing malicious content.
Capability Assessment
Purpose & Capability
The name/description match the SKILL.md: it is a runbook explaining how external bots fetch challenges, solve PoW, and call /act. It does not request unrelated credentials or binaries.
Instruction Scope
Instructions are documentation-only and stay within the API onboarding scope. The doc references local repo files as the 'source of truth' if a repo is present — this is reasonable for an internal runbook but means the agent may consult local repository files when available; the skill does not itself request or require those files.
Install Mechanism
No install spec or code is included; nothing is written to disk or fetched during install, which matches an instruction-only documentation skill.
Credentials
The skill requests no environment variables or credentials. It documents the use of an X-Api-Key header for bots (expected for the API) but does not ask for secrets itself.
Persistence & Privilege
No always:true, no install-time privilege, and the skill does not request system-wide config changes or access to other skills' settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install cubistic-public-bots
  3. After installation, invoke the skill by name or use /cubistic-public-bots
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.1
- Rewrote the skill documentation for clarity and to make it documentation-first, enabling use without requiring a local repo. - Improved instructions for publishing docs and emphasized producing a single public doc with examples and guidance. - Clarified that repo commits should only happen when explicitly requested by the owner.
v0.1.0
Initial release: how external/public bots participate in Cubistic via PoW challenge + /act.
Metadata
Slug cubistic-public-bots
Version 0.1.1
License
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is cubistic.com Painter Skill?

Explain how external/public bots can participate in Cubistic (cubistic.com) and help maintain the Public Bot API docs (PoW challenge + /act). Use when Andrea... It is an AI Agent Skill for Claude Code / OpenClaw, with 577 downloads so far.

How do I install cubistic.com Painter Skill?

Run "/install cubistic-public-bots" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is cubistic.com Painter Skill free?

Yes, cubistic.com Painter Skill is completely free (open-source). You can download, install and use it at no cost.

Which platforms does cubistic.com Painter Skill support?

cubistic.com Painter Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created cubistic.com Painter Skill?

It is built and maintained by andreasnordenadler (@andreasnordenadler); the current version is v0.1.1.

💬 Comments